v2.5.0
majorNew
- •Quanta Copilot (AI agent) - 10 tools for vault, encryption, compliance, and proxy operations. Available on Professional+ plans.
- •MCP Server v1.0 - 18 MCP tools for Claude Desktop, GPT-4o, and other AI agents. stdio + SSE transport.
- •FIDO2/WebAuthn passkey authentication - register passkeys as primary login method.
- •CSA STAR Level 1 self-assessment (CAIQ) - available to customers under NDA.
- •Crypto Agility Engine - zero-downtime algorithm migration across all vault entries.
- •ML Anomaly Detection - behavioural baselines per tenant; alerts on unusual API patterns.
- •Managed File Transfer (MFT) - PQC-encrypted file transfer with S3 WORM delivery receipts.
- •CMMC 2.0 control mapping document - available to US defence-sector customers.
Improved
- •liboqs upgraded to 0.14.1 - latest NIST-finalised ML-KEM and ML-DSA implementations.
- •Thread-safety fix: oqs.Signature instances now created in worker thread pool, eliminating async/sync boundary issues.
- •Compliance engine expanded to 9 frameworks and 56 controls (added NIST SP 800-53 Rev 5).
- •Audit log performance - hash chain verification now parallelised across CPU cores.
- •Frontend React Query cache tuned: staleTime 30s, gcTime 5min, reducing redundant API calls by ~60%.
Security
- •Fixed: AUD $500 liability cap fallback removed from Terms of Service - cap is now fees-paid only.
- •Added: GDPR ePrivacy cookie consent banner with localStorage persistence.
- •Added: RFC 9116 security.txt at /.well-known/security.txt.
- •Timing normalisation middleware now covers the full ML-DSA-65 signature verification path.
- •Anti-replay nonce TTL reduced from 5 minutes to 3 minutes for improved replay resistance.